CVE-2006-0193 Cross-site scripting (XSS) vulnerability in the Hosting Control Panel (psoft.hsphere.CP) in Positive Software H-Sphere 2.4.3 Patch 8 and earlier allows remote attackers to inject arbitrary web script....
MediumCVSS 4.3
EPSS 1.3%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Cross-site scripting (XSS) vulnerability in the Hosting Control Panel (psoft.hsphere.CP) in Positive Software H-Sphere 2.4.3 Patch 8 and earlier allows remote attackers to inject arbitrary web script or HTML via the login parameter in a login action.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| positive software h-sphere | = 2.4.1 | No fix listed |
| positive software h-sphere | = 2.4.1_patch_1 | No fix listed |
| positive software h-sphere | = 2.4.1_patch_2 | No fix listed |
| positive software h-sphere | = 2.4.1_patch_3 | No fix listed |
| positive software h-sphere | = 2.4.1_patch_4 | No fix listed |
| positive software h-sphere | = 2.4.1_patch_5 | No fix listed |
| positive software h-sphere | = 2.4.1_patch_6 | No fix listed |
| positive software h-sphere | = 2.4.1_patch_7 | No fix listed |
| positive software h-sphere | = 2.4.2 | No fix listed |
| positive software h-sphere | = 2.4.2_beta_1 | No fix listed |
| positive software h-sphere | = 2.4.2_beta_2 | No fix listed |
| positive software h-sphere | = 2.4.2_beta_3 | No fix listed |
| positive software h-sphere | = 2.4.2_patch_1 | No fix listed |
| positive software h-sphere | = 2.4.2_patch_2 | No fix listed |
| positive software h-sphere | = 2.4.2_patch_3 | No fix listed |
| positive software h-sphere | = 2.4.2_patch_4 | No fix listed |
| positive software h-sphere | = 2.4.2_patch_5 | No fix listed |
| positive software h-sphere | = 2.4.2_rc1 | No fix listed |
| positive software h-sphere | = 2.4.2_rc2 | No fix listed |
| positive software h-sphere | = 2.4.3 | No fix listed |
| positive software h-sphere | = 2.4.3_beta_1 | No fix listed |
| positive software h-sphere | = 2.4.3_beta_2 | No fix listed |
| positive software h-sphere | = 2.4.3_patch_1 | No fix listed |
| positive software h-sphere | = 2.4.3_patch_2 | No fix listed |
| positive software h-sphere | = 2.4.3_patch_3 | No fix listed |
Show 7 more
| Product | Affected versions | Fixed in |
|---|---|---|
| positive software h-sphere | = 2.4.3_patch_4 | No fix listed |
| positive software h-sphere | = 2.4.3_patch_5 | No fix listed |
| positive software h-sphere | = 2.4.3_patch_6 | No fix listed |
| positive software h-sphere | = 2.4.3_patch_7 | No fix listed |
| positive software h-sphere | = 2.4.3_patch_8 | No fix listed |
| positive software h-sphere | = 2.4.3_rc1 | No fix listed |
| positive software h-sphere | = 2.4.3_rc2 | No fix listed |
References
- 18447 third-party-advisory
- 22372 vdb-entry
- www.psoft.net
- www.psoft.net
- 20060112 H-Sphere Security Vulnerability mailing-list
- ADV-2006-0172 vdb-entry
- hsphere-login-xss(24096) vdb-entry